BIT-nextcloud-2025-66552

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/nextcloud/BIT-nextcloud-2025-66552.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-nextcloud-2025-66552
Aliases
Published
2026-07-13T09:29:28Z
Modified
2026-09-08T08:48:16Z
Summary
Nextcloud Server admin_audit does not log all actions on files in groupfolders
Details

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1.

Database specific 
{
    "cpes": [
        "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / nextcloud

Package

Name
nextcloud
Purl
pkg:bitnami/nextcloud

Severity

  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
31.0.9
Introduced
32.0.0
Fixed
32.0.1

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/nextcloud/BIT-nextcloud-2025-66552.json"